Henrique Pereira

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Online (affected versions not specified) **Description** Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft 365 Copilot (affected versions not specified) **Description** An open redirect allows an unauthorized attacker to redirect users to untrusted sites, which can lead to elevation of privilege over a network and risk to user accounts. This issue is under active exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Azure Function (affected versions not specified) **Description** An information disclosure issue exists in Azure Function. The issue allows for the potential disclosure of information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.